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REMARKS 

Applicants have carefully reviewed this application in light of the Office Action 
mailed January 14, 2005. Claims 1-13, 15-38 and 40-42 are pending in this application. 
Claims 1-13, 15-38 and 40-42 are rejected. Applicants previously canceled Claims 14 and 39 
without prejudice or disclaimer. Applicants have amended Claims 1, 6, 8, 15, 26, 28, 29, 35, 
40, 41, 47 to further define various features of Applicant's invention. Applicants have 
cancelled claims 4, 9, 37 and 39 without prejudice or disclaimer. Applicants respectfully 
request reconsideration and favorable action in this case. 

Rejections under 35 U.S.C. S 103 

Claims 1-13 

Claims 1-13 stand rejected by the Examiner under 35 U.S.C. § 103(a) as being 
unpatentable over U.S. Patent No. 5,949,882 issued to Michael F. Angelo (hereinafter 
"Angelo") and Authoritative Dictionary of IEEE Standards (hereinafter "IEEE Standards") in 
view of U.S. Patent No. 6,282,649 issued to Howard Shelton Lambert (hereinafter 
"Lambert"). Applicants respectfully traverse and submit that Claims 1-13 are patentable over 
Angelo and IEEE Standards in view of Angelo in view of Lambert. 

In order to make obvious Applicant's claimed invention, the references cited by the 
Examiner must disclose all claimed limitations. In re Royka, 490 F.2d 981, 180 U.S.P.Q. 580 
(C.C.P.A. 1974). 

Independent claims 1, 6 and 8, as amended, each recite, among other features, an 
access token communicator for reading "an access token comprising a computer system 
access code and a nonvolatile storage device password integrated within a set of security 
policies such that alteration of the security policies renders the access code and password 
inoperative." 

Angelo teaches the use of a token or smart card for storing encrypted user passwords. 
See col. 3, lines 40-45. 

Lambert teaches the use of user keys tied to specific access levels. See col. 2, lines 6- 

10. 

The cited IEEE Standards simply provide a definition for the term "security level." 
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Applicants submit that Angelo, Lambert and the IEEE Standards fail to disclose, teach 
or suggest, either alone or in combination, the use of security token in which a computer 
system access code and a nonvolatile storage device password integrated within a set of 
security policies such that alteration of the security policies renders the access code and 
password inoperative. Because, the cited references do not teach such a security token, they 
cannot render obvious Independent Claims 1, 6 or 8 or Claims 2-3, 5, 7, or 10-13 which 
depend therefrom. 

Claims 15-25 

Claims 15-25 stand rejected by the Examiner under 35 U.S.C. § 103(a) as being 
unpatentable over Lambert and IEEE Standards in view of Angelo. Applicants respectfully 
traverse and submit that Claims 15-25 are patentable over Lambert and IEEE Standards in 
view of Angelo. 

Independent Claim 15 recites, among other limitations, an access token communicator 
for reading "an access token comprising a computer system access code and a nonvolatile 
storage device password integrated within a set of security policies such that alteration of the 
security policies renders the access code and password inoperative." 

For the reasons cited above, Applicant submit that Lambert, Angelo and the IEEE 
Standards cannot render obvious Independent Claim 15 or Claims 16-25 which depend 
therefrom. 

Claims 26-42 

Claims 26-42 stand rejected by the Examiner under 35 U.S.C. § 103(a) as being 
unpatentable over Angelo, IEEE Standards, Lambert, and further in view of U.S. Patent 
5,323,465 issued to Simon A. B. Avame ("Avarne"). Applicants respectfully traverse and 
submit that Claims 26-42 are patentable over Angelo, IEEE Standards, Lambert, and further 
in view of Avarne. 

Independent Claims 26 recites a method including, among other steps, providing an 
access token reading device to read "a computer system access code and a nonvolatile storage 
device password integrated within a set of security policies such that alteration of the security 
policies renders the access code and password inoperative, stored on an access token." 
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Independent Claim 28 recites a method including the step of: "reading an access token 
containing a computer system access code and a nonvolatile storage device password 
integrated within a set of security policies such that alteration of the security policies renders 
the access code and password inoperative." 

Independent Claim 29 recites a method including the step of receiving, from an access 
token, a computer system access code and a nonvolatile storage device password integrated 
within a set of security policies such that alteration of the security policies renders the access 
code and password inoperative." 

Independent Claim 35 is directed to a method of using "an access token comprising a 
computer system access code and a nonvolatile storage device password integrated within a 
set of security policies such that alteration of the security policies renders the access code and 
password inoperative." 

Independent Claim 40 recites a communication device with and access token that 
utilizes a "security code integrated within the one or more security policies such that 
alteration of the security policies renders the security code inoperative." 

Independent Claims 41 and 42 recite, among other limitations, "a means for reading 
an access token containing a computer system access code and a nonvolatile storage device 
password integrated within a set of security policies such that alteration of the security 
policies renders the access code and password inoperative." 

Angelo, Lambert and the IEEE are discussed above. Avarne teaches the use of 
electronic tokens for "generating digital signatures for the authentication of payment 
instructions within a banking network." See Col. 2, lines 46-48. 

Applicants submit that Angelo, Lambert, the IEEE Standards and Avarne fail to 
disclose, teach or suggest, either alone or in combination, the use of security token in which 
an access code or password is integrated within a set of security policies such that alteration 
of the security policies renders the access code or password inoperative. Because, the cited 
references do not teach such a security token, they cannot render obvious Independent Claims 
26, 28, 29, 35, 40, 41, or 42 or Claims 27, 30-34 or 36 which depend therefrom. 

For at least these reasons, Applicants request reconsideration, withdrawal of the §103 
rejections and full allowance of Claims 1-42. 
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CONCLUSION 



Applicants have now made an earnest effort to place this case in condition for 
allowance in light of the amendments and remarks set forth above. Applicants respectfully 
request reconsideration of the rejections and allowance of the claims, as amended. 

Applicants believe no fee is due at this time, however, the Commissioner is hereby 
authorized to charge any fees or credit any overpayments to Deposit Account No. 02-0383 of 
Baker Botts L.L.P. 



Correspondence Address : 

One Shell Plaza 

910 Louisiana 

Houston, Texas 77002-4992 

512.322.2690 

512.322.8385 (Fax) 




Respectfully submitted, 

BAKER BOTTS L.L.P. 
Att orneys fo r Applicant 
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